Security
Headlines
HeadlinesLatestCVEs

Tag

#Windows Defender Firewall Service

CVE-2025-62468: Windows Defender Firewall Service Information Disclosure Vulnerability

**According to the CVSS metric, privileges required is high (PR:H). What privileges are required to exploit this vulnerability?** To successfully exploit the vulnerability, an attacker must be part of a specific user group.

Microsoft Security Response Center
#vulnerability#windows#Windows Defender Firewall Service#Security Vulnerability
CVE-2025-54915: Windows Defender Firewall Service Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

CVE-2025-54109: Windows Defender Firewall Service Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

CVE-2025-54094: Windows Defender Firewall Service Elevation of Privilege Vulnerability

**What privileges could be gained by an attacker who successfully exploited the vulnerability?** An attacker could use this vulnerability to elevate privileges from Medium Integrity Level to Local Service.

CVE-2025-53810: Windows Defender Firewall Service Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Defender allows an authorized attacker to elevate privileges locally.

CVE-2025-54104: Windows Defender Firewall Service Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Defender allows an authorized attacker to elevate privileges locally.

CVE-2025-53808: Windows Defender Firewall Service Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Defender allows an authorized attacker to elevate privileges locally.